NOVOTS KMS ´Ê»ã±í Glossary    ÁªÏµÎÒÃÇ Contact Us
²éѯ Search  
   
°´Àà±ðä¯ÀÀ Browse by Category
NOVOTS KMS .: ¹¤¾ßÈí¼þ .: Sniffer²¶»ñ³ÇÓòÍøÖÐÒì³£Êý¾Ý

Sniffer²¶»ñ³ÇÓòÍøÖÐÒì³£Êý¾Ý

ºÜ¶àÈ˶¼ÖªµÀͨ¹ýSniffer¿ÉÒԲ鿴Òì³£Êý¾Ý£¬µ«Êµ¼Ê¹¤×÷ÖУ¬ÎÒÃDz¢²»ÖªµÀʲôʱºòÓÐÒì³£Á÷Á¿£¬Ò²²»¿ÉÄÜ×ÜÊǶ¢×Ž»»»»ú£¬ÎÒÃǸÃÔõô°ì£¿ Sniffer proÊÇÒ»¿î¹¦ÄÜÇ¿´óµÄÍøÂç·ÖÎö¹¤¾ß£¬¿ÉÒÔÓÃÓÚ·¢ÏÖ©¶´¡¢²¡¶¾¡¢µÈÒì³£Êý¾Ý£¬Ò²¿ÉÒÔÉú³ÉÍøÂç»ù×¼Ïߣ¬Ìá¹©ÍøÂçÖÊÁ¿Ç÷ÊÆ·ÖÎöÊý¾Ý£¬»¹¿ÉÒÔÓÃÓÚ¹ÊÕÏ¿ìËÙ¶¨Î»£¬ÎÒÔÚ¹¤×÷Öо­³£Óõ½£¬Ôڴ˰ÑʹÓÃÖеÄÌå»áд³öÀ´£¬Ï£Íû¶ÔÆäËûʹÓÃÕßÄÜÓÐÒ»µãÓô¦¡£ ÓùýÂËÆ÷¹ýÂ˳öÎÒÃǹØÐĵÄÊý¾Ý ÒòΪÎÒÃDz¶»ñÊý¾Ýʱ²¢²»ÖªµÀÒì³£Êý¾ÝÊÇÄÇÒ»ÖÖ£¬ËùÒÔÎÒÃÇÔÚ²¶»ñÊÇÓõĹýÂËÆ÷£¨filter£©±ØÐëÊÇĬÈϵÄany<->any£¬Ò²¾ÍÊÇ˵°ÑËùÓо­¹ýµÄÊý¾ÝÈ«²¿²¶»ñ£¬½¨Òé²¶»ñÓÃPCÄÚ´æÒª´ó£¬×îÉÙ256M£¬½«filterµÄbuffer¶¨ÒåΪ32M¡££¨ÒòΪ²¶»ñµã¶àΪÉçÇø»ú·¿ÉÏÐж˿ڵľµÏó£¬Êý¾Ý½Ï´ó£¬Îª±£Ö¤²¶»ñÊý¾ÝÁ¿£¬½¨Ò齫buffer¶¨Òå´óЩ½ÏºÃ£¬£© ¶¨ÒåÍê³Éºó¿ªÊ¼²¶»ñ£¬µ±bufferÂúºóÍ£Ö¹²¶»ñ£¬½øÈë·ÖÎö´°¿Ú£¬ÎÒÃǽøÈëdecode´°¿Ú¿´¿´£º ¡¡ ÔÚÕâÀïÎÒÃÇ¿ÉÒÔ¿´µ½ºÜ¶àµÄÊý¾Ý£¬ÎªÁË¿ìËÙ·ÖÎö£¬ÎÒÃǾÍÒªÓõ½ÁíÒ»ÖÖ¹ýÂËÆ÷£¨display filter£©,ѡȡdisplay->selete filter,¿ÉÒÔ¿´µ½ÏÂͼ£º ÎÒÕâÀïÒѾ­¶¨ÒåÁËһЩ¹ýÂËÆ÷£¬¶¨Òå·½·¨ºóÃæÔÙ½øÐÐÑÝʾ£¬ÕâÀïÏÈ¿´Ó÷¨£¬Ñ¡ÔñÒ»¸ö¹ýÂËÆ÷£¬ÈçARP£¬½«°ÑÕâ¸öÊý¾Ý°üÀïËùÓеÄARPЭÒéÊý¾Ý°ü¹ýÂ˳öÀ´£¬ ÏàÓ³µÄÓÃÆäËûµÄ¹ýÂËÆ÷¿ÉÒÔ¹ýÂ˳öÎÒÃǹØÐĵÄÊý¾Ý£¬Ìá¸ßÎÒÃǵķÖÎöЧÂÊ¡£¹ýÂ˳öÀ´µÄÊý¾Ý¾ÍÏà¶Ô½ÏÉÙÇÒ½ÏΪһÖ£¬±ãÓÚÎÒÃÇ·ÖÎö¡£ ÏÂÃæ½éÉÜһϹýÂËÆ÷µÄ¶¨Òå·½·¨£¬Ñ¡Ôñdisplay->define filter: 1¡¢ °´µØÖ·¹ýÂË£ºÓÖ·ÖΪÈþÖÖ£¬ºÜ¼òµ¥£¬¿´¿´¾ÍÃ÷°×ÁË: 2¡¢ Êý¾Ý¹ýÂË£ºÕâ¸öÊDZȽϸ߼¶µÄ£¬Ö÷Òª¹¦ÄÜÊǶÔÊý¾Ý°ü°´ÌØÕ÷Âë¹ýÂË£¬Ê¹ÓõÄǰÌáÊǶÔijÖÖÊý¾ÝµÄÌØÕ÷ÂëºÜÇå³þ£¬Ä¿Ç°×Ô¶¨Ò廹±È½ÏÄÑ£¬ÓÐÐËȤµÄͬ־¿ÉÒÔÑо¿¿´¿´¡£ 3¡¢ ¸ß¼¶¹ýÂË£ºÆäʵ¾ÍÊÇÓÃЭÒé¹ýÂË£¬¿´¿´¾ÍÃ÷°×ÁË ÈçºÎÓ¦ÓùýÂËÆ÷£¿ Æäʵ¹ýÂËÆ÷³ýÁË×Ô¼º¶¨ÒåÍ⻹¿ÉÒÔµ¼ÈëÒѾ­¶¨ÒåºÃµÄ£¬Ê×ÏÈ£¬ÎÒÃÇ¿ÉÒÔÈ¥NG¹«Ë¾µÄÍøÕ¾È¥ÏÂÔØSniffer¹ýÂËÆ÷£¬ÐèҪ˵Ã÷µÄÊÇSnifferµÄ²¡¶¾¹ýÂËÆ÷µÄÃû³Æ¶¨ÒåÊÇÀ´×ÔMcAfeeµÄ¶¨Ò壬ÓëÆäËü·À²¡¶¾³§ÉÌÓÈÆäÊǹúÄڵķÀ²¡¶¾³§É̵IJ¡¶¾Ãû³Æ¶¨ÒåÊÇÓÐһЩ²îÒìµÄ¡£ ÏÂÔØµ½¹ýÂËÆ÷£¬ÎÒÃǾͿÉÒ԰ѸùýÂËÆ÷µ¼Èëµ½SnifferÀïÈ¥ÁË¡£½âѹ¿ªÏÂÔØµ½µÄ¹ýÂËÆ÷Îļþ£¬Äã»á¿´µ½Ðí¶àÎļþ£¬ÎÒÃÇÒÔMydoom²¡¶¾¹ýÂËÆ÷Îļþ¾ÙÀý˵Ã÷£ºImporting Filter.rtf£¨µ¼Èë¹ýÂËÆ÷˵Ã÷Îļþ£©£¬Sniffer Filter Creation Specification for W32_MyDoom@MM.rtf£¨ËµÃ÷ÈçºÎ¶¨ÒåMydoom²¡¶¾¹ýÂËÆ÷£©£¬NetAsyst - W32_Mydoom@MM.csf£¨NetAsystÈí¼þʹÓã­£­NG¹«Ë¾Õë¶ÔÖÐСÐÍÆóÒµ¶¨ÖƵÄÈí¼þ£¬¹¦ÄÜÓëSniffer Pro»ù±¾Ï൱£¬Ö»ÏÞ10/100M EthernetºÍWirelessʹÓã©£¬SnifferDistributed4.* - W32_MyDoom@MM.csf(·Ö²¼Ê½SnifferʹÓã¬Óжà¸ö°æ±¾£º4.1£¬4.2£¬4.3£¬4.5µÈ£©£¬»¹ÓоÍÊÇÎÒÃÇÐèҪʹÓõÄSnifferPortable4.* - W32_Mydoom@MM.csf£¨ÓÐ4.7,4.7.5,4.8µÈ°æ±¾£¬Õë¶ÔÄãËùʹÓõÄSniffer°æ±¾ºÅÀ´Ñ¡ÔñÄãÐèÒªµÄ£©¡£ ½Ó×ÅÕÒµ½SnifferµÄ°²×°Ä¿Â¼£¬Ä¬ÈÏÇé¿öÏÂÊÇÔÚ£ºC:\Program Files\NAI\SnifferNT\Program£¬ÕÒµ½¸ÃĿ¼Ïµġ°Nxsample.csf¡±Îļþ£¬½«Ëü¸ÄÃû³ÉNxsample.csf.bak£¨Ö÷ÒªÊÇΪÁ˱¸·Ý£¬·ñÔò¿ÉÒÔɾ³ý£©£¬È»ºó½«ÎÒÃÇËùÐèÒªµÄ¹ýÂËÆ÷ÎļþSnifferPortable4.7.5 - W32_Mydoom@MM.csfÎļþ¿½±´µ½¸ÃĿ¼£¬²¢½«Ëü¸ÄÃûΪ¡°Nxsample.csf¡±¡£ È»ºó£¬ÎÒÃÇÔÙ´ò¿ªSniffer ProÈí¼þ£¬¶¨Òå¹ýÂËÆ÷£¨display--Define Filter£©£¬Ñ¡ÔñProfile£­£­New£­£­ÔÚNew Profile NameÀïÌîÈëÏàÓ¦µÄ±êʶ£¬ÈçW32/Mydoom£­£­Ñ¡ÔñCopy Sample Profile£­£­Ñ¡ÔñW32/Mydoom@MM£¬È·¶¨ºó£¬ÎÒÃǾÍËã×öºÃÁËMydoomÕâ¸ö²¡¶¾µÄ¹ýÂËÆ÷¡£ ¡¡ ÏÖÔÚ£¬ÎÒÃǾͿÉÒÔÔÚ¹ýÂËÆ÷Ñ¡ÔñÀïÑ¡ÔñMydoom¹ýÂËÆ÷¶ÔMydoom²¡¶¾½øÐмì²âÁË¡£ ÏÂÃæÄãÔÚDECODE´°¿ÚÀïʹÓÃÕâ¸ö¹ýÂËÆ÷£¬Èç¹ûÄãû¹ýÂ˵½ÈκÎÊý¾Ý£¬¹§Ï²£¬Äã²¶»ñµÄÊý¾ÝÀïûÓÐÕâ¸ö²¡¶¾£¬Äã¿ÉÒÔ°²ÐÄÁË£»Èç¹ýÄã¹ýÂ˵½ÁËÊý¾Ý£¬Ò²¹§Ï²£¬ÄãÓгɼ¨ÁË£¬È»ºó¸ù¾Ý¹ýÂ˵½µÄÊý¾ÝÔ´IP¡¢MACµÈÐÅÏ¢ÕÒµ½Óû§£¬½øÐÐÏàÓ¦µÄ´¦Àí£¬±ÜÃⲡ¶¾µÄÀ©É¢¡£ ÒÔÏÂÊÇһЩÎÒÔÚ¹¤×÷Öв¶»ñµ½µÄÒì³£Êý¾Ý£º ARPɨÃ裺 ARPÆÛÆ­ Óʼþ²¡¶¾£º P2PÁ÷Á¿£º ÒÉÄÑ£º²»ÖªµÀʲôʱºòÓÐÒì³£Á÷Á¿ ÔÚ¹¤×÷ÖÐÎÒÃDz¢²»ÖªµÀʲôʱºòÓÐÒì³£Á÷Á¿£¬Ò²²»¿ÉÄÜ×ÜÊǶ¢×Ž»»»»ú£¬Õâ¸öʱºò¾ÍÒª¶¨Òå´¥·¢Æ÷£¬ÈõçÄÔÈ¥¼àÊÓÍøÂçÁË¡£ ´¥·¢Æ÷£¬¾ÍÊÇÈÃsniffer proÒ»Ö±¼àÊÓÍøÂ磬µ«²»²¶»ñÊý¾Ý£¬Ò»Ö±µ½Âú×ãÁË´¥·¢Æ÷Ìõ¼þºó¿ªÊ¼²¶»ñ£¬´ïµ½Í£Ö¹Ìõ¼þÍ£Ö¹£¬Ò»°ãÓÐʱ¼äÌõ¼þ¡¢¹ýÂËÆ÷Ìõ¼þ¡¢alarmsÌõ¼þ¡£¶¨Òå·½·¨Îªcapture->trigger setup µã»÷start triggerÖеÄdefine ¡¡ ʱ¼äÌõ¼þ£º²»Óöà˵ÁË¡£ ¹ýÂËÆ÷Ìõ¼þ£ºÓö¨ÒåºÃµÄ¹ýÂËÆ÷¹ýÂË£¬¹ýÂ˵½Êý¾ÝºóÆô¶¯´¥·¢Æ÷¡£ alarmsÌõ¼þ£º¼àÊÓµÄÊý¾Ý´ïµ½ÁËÑ¡¶¨µÄÏîÄ¿µÄ·§Öµºó¿ªÊ¼²¶»ñ¡£ Ìõ¼þÖйýÂËÆ÷ÒѾ­Ëµ¹ýÁË£¬ÕâÀï˵һÏÂalarms·§ÖµµÄ¶¨Ò壬ѡÔñtools->optionsϵÄMAC threshold ,ÕâÀï¾ÍÊǶ¨Òå·§ÖµµÄµØ·½¡£ ´¥·¢Æ÷µÄ½áÊø´¥·¢ºÍ¿ªÊ¼´¥·¢²î²»¶à£¬¶Ô±ÈһϾÍÃ÷°×ÁË¡£ ´¥·¢Æ÷¶¨ÒåºÃºó¾Í¿ÉÒÔʹÓÃÁË£¬ÆôÓúócaptureϵÄtrigger setup»á±ä³Écancel trigger£¬ÔÚʹÓô¥·¢Æ÷ǰҪ¸ü¸ÄʹÓõĹýÂËÆ÷£¬ÉèÖÃΪbufferÂúºó×Ô¶¯±£´æ£¬ÕâÑù²Å¿ÉÒÔ°ÑÎÒÃÇÐèÒªµÄÊý¾Ý±£´æÏÂÀ´¹©ÎÒÃÇ·ÖÎöÓá£

ÕâÆªÎÄÕ¶ÔÄã¶àÓÐÓã¿

Ïà¹ØÎÄÕÂ

article sniffer ʹÓÃ
¡¡¡¡1. Network General. ¡¡¡¡Network...

(No rating)  8-2-2011    Views: 1372   
article ARP Sniffer¹¥·ÀʵÀý
²ÈµãºÍɨÃèÓ¦ÓÃWindowsϵͳµÄWeb·þÎñÆ÷µÄ´úÂë½á¹¹¶...

(No rating)  10-26-2013    Views: 887   
article Cisco½»»»»úʵÑéÊÖ²á
¸½¼þÄÚÊÇÒ»Ì×Cisco½»»»»úʵÑéÊֲᣨÉñÖÝÊýÂëµÄ£©£¬...

  8-15-2008    Views: 2500   

Óû§ÆÀÓï

Ìí¼ÓÆÀÓï
µ±Ç°»¹Ã»ÓÐÆÀÓï.


.: .: .: .: .:
[ 怫 ]
±±¾©»¤º½¿Æ¼¼ÓÐÏÞ¹«Ë¾ 2006

Novots Technologies Limited